You must provide the login name and current password or API key of the user whose password is to be updated in an HTTP Basic Authentication header. Also replaces the user’s API key with a new securely generated random value. You can fetch the new API key using the Login method.
The Basic authentication-compliant header is formed by:
- Concatenating the role's name, a literal colon character ':', and the password or API key to create the authentication string.
- Base64-encoding the authentication string.
- Prefixing the authentication string with the scheme:
Basic(note the required space). - Providing the result as the value of the
AuthorizationHTTP header:Authorization: Basic <authentication string>.
Your HTTP/REST client probably provides HTTP basic authentication
support. For example, curl and all of the Conjur client libraries
provide this.
Note that machine roles (Hosts) do not have passwords. They authenticate using their API keys, while passwords are only used by human users.